Lucene search
+L

9235 matches found

CVE
CVE
•added 2024/07/02 3:57 p.m.•266 views

CVE-2024-4467

CVE-2024-4467 describes a flaw in QEMU’s disk image utility (qemu-img) where a crafted image containing a json:{} description of block devices could cause the host qemu-img process to consume excessive memory or CPU, enabling denial of service and potential read/write to an external file. The con...

7.8CVSS7.3AI score0.00336EPSS
SaveExploits0References13
OSV
OSV
•added 2024/07/02 3:57 p.m.•29 views

CVE-2024-4467 Qemu-kvm: 'qemu-img info' leads to host file read/write

A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write ...

7.8CVSS7AI score
SaveExploits0References17
Debian CVE
Debian CVE
•added 2024/07/02 3:57 p.m.•21 views

CVE-2024-4467

A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write ...

7.8CVSS7.1AI score0.00336EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2024/07/02 3:56 p.m.•30 views

CVE-2024-4467

A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write ...

7.8CVSS7.3AI score0.00336EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2024/07/02 9:02 a.m.•8 views

kernel: udf: Fix NULL pointer dereference in udf_symlink function

A vulnerability was found in the Linux kernel's UDF file system driver, where the udfsymlink function can dereference a NULL pointer. This occurs because the function uses a value returned from udftgetblk without checking if it is NULL, potentially causing system crashes if sbgetblk fails...

5.5CVSS6.8AI score0.00309EPSS
SaveExploits0References5
Citrix
Citrix
•added 2024/07/02 12:00 a.m.•18 views

Citrix CDFControl Service How to Save Logs On A UNC Network Share

Sometimes it may be necessary to save trace data to a shared network folder, for example, crash/hang issues with non-persistent VDAs or due to local disk space constraints...

6.9AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/06/30 2:00 p.m.•16 views

tmpfs: fix race on handling dquot rbtree

...

7.8CVSS7AI score0.00388EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/06/28 11:16 p.m.•9 views

SUSE CVE-2024-39134

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the zzipfetchdisktrailer function at /zzip/zip.c...

5.5CVSS6.8AI score0.00604EPSS
SaveExploits1References6
OSV
OSV
•added 2024/06/27 9:15 p.m.•18 views

AZL-43669 CVE-2024-39134 affecting package zziplib 0.13.72-3

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the zzipfetchdisktrailer function at /zzip/zip.c...

7.5CVSS5.8AI score0.00604EPSS
SaveExploits1References1
OSV
OSV
•added 2024/06/27 9:15 p.m.•16 views

AZL-44745 CVE-2024-39134 affecting package zziplib for versions less than 0.13.74-1

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the zzipfetchdisktrailer function at /zzip/zip.c...

7.5CVSS6.6AI score0.00604EPSS
SaveExploits1References1
OSV
OSV
•added 2024/06/27 9:15 p.m.•6 views

DEBIAN-CVE-2024-39134

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the zzipfetchdisktrailer function at /zzip/zip.c...

7.5CVSS6.2AI score0.00604EPSS
SaveExploits1References1
OSV
OSV
•added 2024/06/27 9:15 p.m.•12 views

UBUNTU-CVE-2024-39134

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the zzipfetchdisktrailer function at /zzip/zip.c...

7.5CVSS5.8AI score0.00604EPSS
SaveExploits1References3
Snyk
Snyk
•added 2024/06/27 8:41 p.m.•10 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow through the zzipfetchdisktrailer function. An attacker can disrupt service and potentially execute arbitrary code by sending specially crafted inputs. Remediation Upgrade zziplib to version 0.13.78 or higher...

8.7CVSS6.7AI score0.00604EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/06/27 12:00 a.m.•9 views

ZZIPlib security vulnerability

ZZIPlib is a compressed document extraction library. A security vulnerability exists in ZZIPlib version v0.13.77, which stems from a denial of service vulnerability in the zzipfetchdisktrailer function of the /zzip/zip.c file...

7.5CVSS6.7AI score0.00604EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2024/06/27 12:00 a.m.•15 views

The vulnerability of the IOAESAccelerator component in the UDF file system of the Mac OS allows a hacker to increase their privileges.

The vulnerability of the IOAESAccelerator component in the UDF file system of the Mac OS operating system is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

10CVSS7.9AI score0.00327EPSS
SaveExploits0References6Affected Software1
SUSE CVE
SUSE CVE
•added 2024/06/22 4:09 a.m.•10 views

SUSE CVE-2022-48753

In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in diskregisterindependentaccessranges kobjectinitandadd takes reference even when it fails. According to the doc of kobjectinitandadd If this function returns an error, kobjectput must be called to properl...

5.5CVSS6.1AI score0.00179EPSS
SaveExploits0References6
OSV
OSV
•added 2024/06/20 12:15 p.m.•14 views

DEBIAN-CVE-2022-48753

In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in diskregisterindependentaccessranges kobjectinitandadd takes reference even when it fails. According to the doc of kobjectinitandadd If this function returns an error, kobjectput must be called to properl...

5.5CVSS5.3AI score0.00179EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/20 12:00 a.m.•9 views

OPENSUSE-SU-2024:14058-1 kubevirt-container-disk-1.2.2-2.1 on GA media

These are all security issues fixed in the kubevirt-container-disk-1.2.2-2.1 package on the GA media of openSUSE Tumbleweed...

5.9CVSS5.7AI score0.00327EPSS
SaveExploits0References1
Citrix
Citrix
•added 2024/06/17 12:00 a.m.•15 views

Driver Disk for Intel i40e 2.22.20-5 - For Citrix Hypervisor 8.2 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 Cumulative Update 1 LTSR release who use Intel's i40e driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- i40e| Ethernet/NIC| 2.22.20-5 reissue Issues resolved ...

7.1AI score
SaveExploits0
OSV
OSV
•added 2024/06/15 12:00 a.m.•13 views

OPENSUSE-SU-2024:12792-1 kubevirt-container-disk-0.59.0-2.1 on GA media

These are all security issues fixed in the kubevirt-container-disk-0.59.0-2.1 package on the GA media of openSUSE Tumbleweed...

8.2CVSS8.2AI score0.00611EPSS
SaveExploits0References1
Rows per page
Query Builder